The corp 112 final bundle equips the cybersecurity and compliance team of the Mexican bank, insurer, fintech or SOFOM for CNBV audit and anti-money-laundering (AML) training: CNBV cybersecurity manual, backpack with encrypted USB, engraved flask, AML/CFT training kit with DC-3. The CFDI 4.0 invoice runs under key G03 with deduction as regulatory training expense under Article 27 LISR.
CNBV (Comision Nacional Bancaria y de Valores) supervises banks, insurers, fintechs, SOFOMES, brokerages and other financial entities in Mexico. CNBV cybersecurity regulation is composed of three main circulars: the Single Banking Circular (CUB), the Single Insurance Circular (CUSA) and the Single Popular Financial Societies Circular (CUSOFIPO). All three require financial institutions to implement a cybersecurity management system with specific controls.
The Single Banking Circular (CUB) in its Articles 165 to 167 bis sets the minimum cybersecurity requirements for Mexican banks. The bank must identify and evaluate cybersecurity risks, implement access controls, data protection, incident management and disaster recovery. CNBV verifies compliance through in-person inspections and remote audits. The non-compliant bank faces fines from $1,000,000 to $200,000,000 MXN depending on severity and recidivism.
The Federal Law to Prevent and Punish Money-Laundering Offences (LFPDPPP) and the General Rules issued by the UIF (Unidad de Inteligencia Financiera) require Mexican financial institutions to implement an anti-money-laundering (AML) and counter-terrorism-financing (CFT) system. The AML/CFT system includes customer identification (KYC), transaction monitoring, suspicious-transaction reporting (STR), staff training and annual audit.
The corp 112 final bundle equips the bank, insurer or fintech's AML/CFT compliance team to comply with CNBV and LFPDPPP requirements. The manual covers the Single Banking Circular on cybersecurity, the UIF General Rules on AML/CFT, and the international best practices of the FATF (Financial Action Task Force). The DC-3 training credits the staff before the STPS and CNBV in case of inspection.
The kit is delivered to the compliance team, the cybersecurity team and the customer-service team of the financial institution. Each profile has its own variations of the manual and the encrypted USB.
320-page full-colour printed manual with the CNBV cybersecurity regulatory framework (Single Banking Circular, Articles 165 to 167 bis) and the UIF AML/CFT regulatory framework (LFPDPPP and General Rules). Includes 50 practical cases of Mexican financial institutions (bank, insurer, fintech, SOFOM), with editable templates for STR (suspicious transaction reports), examples of CNBV audit and case-law from CNBV, UIF and collegiate courts in financial matters. 2026 edition with the CUB reforms.
Reinforced canvas backpack with laptop compartment, embroidered with the corporate logo and the text Compliance CNBV/AML. Includes encrypted 64 GB USB with editable templates for STR, KYC policies, transaction monitoring policies, cybersecurity procedures manual, blocked-persons and PEP (Politically Exposed Persons) database, and a case-law library from CNBV, UIF and collegiate courts in financial matters.
Casio FC-200V financial calculator with solar power and backup battery, preloaded with formulas to compute encaje rates, regulatory capital, loan-loss provisioning and STR computation by UIF threshold. Includes printed quick guide with the steps to compute the amount to report and the deadlines for the report. The calculator is delivered in a leather case with the corporate logo.
600 ml stainless steel flask laser-engraved with the compliance officer name, site and the text Compliance CNBV/AML. AML/CFT training kit with DC-3 manual, training script, PowerPoint presentation, knowledge tests and DC-3 certificate before the STPS. The training lasts 24 hours (AML/CFT basic) or 40 hours (AML/CFT advanced) and is delivered in-person or synchronous virtual.
The corp 112 final bundle is invoiced under CFDI use key G03 (general expenses) with line-by-line breakdown. The deductibility runs under Article 27 LISR as an expense strictly indispensable in financial regulatory compliance. For banks and insurers under the general fiscal regime, the deduction runs under the same article. For institutions under the business-activity regime, the deduction additionally runs under Article 40 LISR as a pre-operating expense when the institution is in launch phase.
The manual and teaching material are invoiced with key H87 (training) or P01 (to be defined) when they are integrated into the regulatory-training service. The backpack and flask are invoiced under key E46 (product not classified). The encrypted USB is invoiced under key S01 (consulting services) when considered part of the compliance-implementation service. The DC-3 certificate is attached to the officer's training file.
For financial corporates with interstate deliveries, delivery of the material runs with Carta Porte 3.0 when the material crosses state borders. For international deliveries (the case of institutions with US parents), the foreign-trade complement is attached with a temporary or definitive import pedimento. The invoice runs with the foreign-trade key and deduction as regulatory expense.
The financial corporate with an annual training programme issues one consolidated quarterly invoice for all deliveries of the quarter. The invoice breaks down by site, date, number of trained staff and individual amount. The deductibility runs under the same Article 27 LISR regardless of frequency. The supporting documentation includes the compliance-officer-signed attendance list, the DC-3 certificates issued, and the quarterly training report to the UIF.
CNBV supervises more than 6,000 financial entities in Mexico: 50 banks, 100 insurers, 1,500 SOFOMES, 200 brokerages, 30 AFORES, and hundreds of fintechs, credit unions and popular financial societies. CNBV regulation is divided into four large blocks: prudential regulation (capital, liquidity, risk), conduct regulation (transparency, customer service), cybersecurity regulation (controls, incident management) and AML/CFT regulation (identification, monitoring, reporting).
The UIF (Unidad de Inteligencia Financiera) is the Mexican central unit for the prevention and fight against money laundering and terrorism financing. The UIF receives suspicious-transaction reports (STR) from financial institutions, analyses them and, where appropriate, shares them with the Attorney General's Office for investigation. The UIF also issues General Rules that set the AML/CFT operational requirements for each type of financial institution.
FATF (Financial Action Task Force) is the international body that sets the 40 Recommendations for the prevention of money laundering and terrorism financing. Mexico has been a member of FATF since 2000 and undergoes mutual evaluation every 5 years. The 2023 evaluation showed areas for improvement in the supervision of vulnerable activities (real estate, jewellers, notaries) and in international cooperation. CNBV and UIF are implementing the necessary reforms for the 2028 evaluation.
The corp 112 final bundle complies with CNBV and UIF requirements and with FATF's 40 Recommendations. The manual includes cross-references to CUB articles, LFPDPPP, UIF Rules and FATF Guidelines. The DC-3 training credits the compliance officer, the cybersecurity officer and the customer-service staff. The certificate is attached to the employee file and kept for 5 years as inspection support.
Prices in MXN before 16% IVA. The basic corp 112 final bundle starts at $4,200 MXN per unit from MOQ 10. The standard bundle with premium backpack and calculator starts at $6,800 MXN per unit from MOQ 5. The premium bundle with high-end backpack and 128 GB encrypted USB starts at $11,500 MXN per unit from MOQ 3. For financial corporates with training programme over 100 officers we run a preferential rate with 18% discount on the base price.
Lead times are 12 to 16 business days for basic kits and 20 to 26 business days for premium kits with preloaded USB. Delivery is coordinated with the financial corporate's compliance area for the start of training. For corporates with interstate operations, delivery runs with Carta Porte 3.0 and immediate deductibility. For urgent deliveries (CNBV inspection case), we run an express kit with 5 business-day production and 30% surcharge.
For financial corporates with US operations under USMCA we run versions with manual in Spanish and English and FinCEN compliance for the compliance officer with activity in North America. Delivery is via DHL Express Worldwide with 0% IVA and foreign trade complement. Transit time is 3 to 5 business days for North America.
Yes. The 2026 manual edition covers the updated Single Banking Circular with the 2025-2026 cybersecurity reforms. The manual covers CUB Articles 165 to 167 bis, UIF General Rules, LFPDPPP, FATF Guidelines and international best practices. The manual is updated every January and distributed to corporates with annual subscription.
Yes. The DC-3 certificate credits the training before the STPS and serves as support in case of a CNBV inspection or UIF audit. For compliance officers, DC-3 is an indispensable requirement under the UIF Rules. Training must be at least 24 hours for AML/CFT basic and 40 hours for AML/CFT advanced. The certificate is attached to the officer's file and renewed annually.
Yes. AML/CFT training runs in-person (24 or 40 hours in the classroom) or synchronous virtual (24 or 40 hours via Zoom or Teams). The virtual version includes the same materials and the same DC-3 certificate. The virtual advantage is that the officer does not travel to the corporate site. The disadvantage is that practical exercises are limited to simulations.
For financial corporates with interstate operations, AML/CFT training is invoiced under CFDI 4.0 with the services operation key when the instructor travels to deliver it. Delivery of material to different cities runs with Carta Porte 3.0. The invoice for the material is attached to the corporate's fiscal file. The deductibility runs under Article 27 LISR as regulatory training expense.
Yes. For SOFOMES (Sociedades Financieras de Objeto Multiple) we run a kit version with specific training in the CNBV AML/CFT regime for SOFOMES, CUSOFIPO and UIF rules for vulnerable activities. Training lasts 24 hours and covers the AML/CFT procedures manual required by CNBV. The DC-3 certificate additionally deducts under Article 27 LISR as regulatory training expense.
Yes. For ITFs (instituciones de tecnología financiera) authorised by CNBV, we run a kit version with specific training in AML/CFT for ITFs under UIF Rules for ITFs and the CNBV regulation for ITFs (CUFIN). Training covers the AML/CFT procedures manual required by CNBV for ITFs, with focus on digital customer identification, online transaction monitoring and suspicious-transaction reporting. The DC-3 certificate additionally deducts under Article 27 LISR.